World Trade Center Health Program
Disclosed May 7, 20264 months ago1,071 affectedConfirmed
The covered entity (CE), World Trade Center Health Program reported that the subcontractor of its business associate (BA) experienced a breach of its network that affected the protected health information (PHI) of 1071 individuals. The PHI involved demographic and financial information. The CE notified HHS and the BA’s subcontractor notified the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 1,071 (as reported to HHS) |
|---|---|
| Disclosed | May 7, 2026 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): World Trade Center Health Program (Health Plan, DC)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | May 7 | 1,071 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.